This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa
File: 5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa (raw, json)
Hash identifier: ur9ZZutgcQNsjYECrugVUuFzEoIADDWWeVEwfUrfu3I=
Subject key identifier: CD:5D:DD:F8:62:A4:6A:7B:4D:25:5A:35:AF:F9:A0:B2:3D:33:25:89
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C1D2B713963DC2DFC1FF25300
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa
Signing time: Mon 08 Dec 2025 02:00:31 +0000
ROA not before: Mon 08 Dec 2025 02:00:31 +0000
ROA not after: Sun 08 Mar 2026 02:00:31 +0000
asID: 8069
IP address blocks: 20.33.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1d:2b:71:39:63:dc:2d:fc:1f:f2:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 8 02:00:31 2025 GMT
Not After : Mar 8 02:00:31 2026 GMT
Subject: CN=0ea14704-e5e7-4c53-b923-fbe1278bd9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:51:10:10:98:42:5e:8d:08:56:23:7f:57:
5a:fe:09:14:ee:bf:27:27:71:26:1e:22:fe:ae:06:
76:9e:c9:41:e1:11:ba:50:6b:1f:3e:3b:6d:37:9c:
73:e8:8d:d5:f8:5a:05:9e:1f:7c:da:6b:1a:40:29:
1b:57:c3:b8:f9:5d:2c:ea:2b:a7:4a:8f:4e:75:33:
8b:69:90:77:b7:04:bf:13:ca:6b:1f:54:b8:7c:29:
68:e8:09:37:18:5d:32:54:c7:3d:52:59:0a:91:c1:
b1:b8:e4:01:ca:cf:4c:45:3b:56:88:df:f1:b7:6e:
01:7c:92:de:db:0c:aa:4f:5b:f3:a8:af:62:31:57:
c4:bf:f1:17:6d:85:91:0b:c8:38:d7:25:4a:f4:31:
f4:3c:f8:e9:43:74:91:e1:ac:01:ac:cc:5d:c8:be:
2b:17:2f:eb:7f:c9:2d:9d:e4:ee:d3:6a:50:48:41:
34:8f:55:a0:e2:43:35:72:03:fe:a9:11:94:6b:25:
19:44:4d:e2:d0:75:e8:4a:9b:71:2f:1c:30:03:90:
d5:cb:b5:14:a1:4a:07:dc:5e:44:a7:1f:95:6c:0a:
07:8f:b2:89:62:a7:76:73:fe:c6:ce:e2:08:cc:41:
f6:7f:41:8b:f3:20:1b:94:b7:43:22:03:c4:cf:ae:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5D:DD:F8:62:A4:6A:7B:4D:25:5A:35:AF:F9:A0:B2:3D:33:25:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:7b:4b:b8:e3:50:ed:57:0d:73:e7:aa:66:64:49:a0:25:dc:
30:2b:a6:75:aa:d2:f1:7d:80:6d:75:2d:48:d5:25:f1:01:e5:
a7:3d:da:92:8e:5c:7e:b3:83:a3:2a:4f:06:8b:3f:5e:74:3d:
53:48:7d:eb:23:92:5e:13:a0:1f:0c:71:b8:30:4d:6e:cf:3c:
f8:14:25:d8:8d:5d:ab:74:61:fb:47:7e:f6:9d:47:c2:b6:f6:
c9:e3:f1:32:83:96:e5:8a:d4:83:28:58:38:7e:bc:6f:5f:aa:
d0:18:05:ef:1f:75:48:58:9d:bf:e9:dd:ba:03:7e:0c:f6:17:
6a:5c:6c:dd:90:3c:ba:ec:1b:a2:1b:e4:79:88:1c:36:65:d9:
dc:f7:47:c5:56:9b:e7:a4:63:d2:1a:62:88:e0:b7:11:58:63:
93:40:46:1d:f7:92:c2:7e:db:b7:81:cf:e9:e5:a6:ef:35:b2:
39:be:08:88:00:fc:31:97:d7:95:3d:97:e5:2b:19:ac:4a:12:
c3:9a:6f:e2:89:53:4e:4d:3e:1b:3f:99:3f:db:1d:7c:d2:95:
88:c8:01:2f:24:2b:80:3c:2c:34:e0:6a:ea:1b:b9:32:18:bc:
48:23:50:80:38:ca:59:6a:0e:d8:60:26:b0:40:1f:25:bd:ce:
23:a4:f8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:45:17 2025 by rpki-client